github - ghsa-2xpq-xp6c-5mgj

ghsa-2xpq-xp6c-5mgj

Vulnerability from github

Published

2024-09-17 14:59

Modified

2024-09-23 21:33

Severity ?

5.3 (Medium) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
6.9 (Medium) - CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N

Summary

Contao affected by insert tag injection via canonical URL

Details

Impact

It is possible to inject insert tags in canonical URLs which will be replaced when the page is rendered.

Patches

Update to Contao 4.13.49, 5.3.15 or 5.4.3.

Workarounds

Disable canonical tags in the settings of the website root page.

References

https://contao.org/en/security-advisories/insert-tag-injection-via-canonical-urls

For more information

If you have any questions or comments about this advisory, open an issue in contao/contao.

Show details on source website

JSON

To clipboard

{
  "affected": [
    {
      "package": {
        "ecosystem": "Packagist",
        "name": "contao/core-bundle"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "4.13.0"
            },
            {
              "fixed": "4.13.49"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "Packagist",
        "name": "contao/core-bundle"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "5.0.0"
            },
            {
              "fixed": "5.3.15"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "Packagist",
        "name": "contao/core-bundle"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "5.4.0"
            },
            {
              "fixed": "5.4.3"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    }
  ],
  "aliases": [
    "CVE-2024-45612"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-20",
      "CWE-74",
      "CWE-79"
    ],
    "github_reviewed": true,
    "github_reviewed_at": "2024-09-17T14:59:02Z",
    "nvd_published_at": "2024-09-17T19:15:28Z",
    "severity": "MODERATE"
  },
  "details": "### Impact\n\nIt is possible to inject insert tags in canonical URLs which will be replaced when the page is rendered.\n\n### Patches\n\nUpdate to Contao 4.13.49, 5.3.15 or 5.4.3.\n\n### Workarounds\n\nDisable canonical tags in the settings of the website root page.\n\n### References\n\nhttps://contao.org/en/security-advisories/insert-tag-injection-via-canonical-urls\n\n### For more information\n\nIf you have any questions or comments about this advisory, open an issue in [contao/contao](https://github.com/contao/contao/issues/new/choose).",
  "id": "GHSA-2xpq-xp6c-5mgj",
  "modified": "2024-09-23T21:33:39Z",
  "published": "2024-09-17T14:59:02Z",
  "references": [
    {
      "type": "WEB",
      "url": "https://github.com/contao/contao/security/advisories/GHSA-2xpq-xp6c-5mgj"
    },
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-45612"
    },
    {
      "type": "WEB",
      "url": "https://github.com/contao/contao/commit/1c28e9ac7a7b915134962a59681a8701a44ccbe2"
    },
    {
      "type": "WEB",
      "url": "https://github.com/contao/contao/commit/d105224e14ddc84f27cd8802b553369decdcbe66"
    },
    {
      "type": "WEB",
      "url": "https://github.com/contao/contao/commit/ffe05cda5310dc2bd259d1391197f3849dab8590"
    },
    {
      "type": "WEB",
      "url": "https://contao.org/en/security-advisories/insert-tag-injection-via-canonical-urls"
    },
    {
      "type": "PACKAGE",
      "url": "https://github.com/contao/contao"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
      "type": "CVSS_V3"
    },
    {
      "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N",
      "type": "CVSS_V4"
    }
  ],
  "summary": "Contao affected by insert tag injection via canonical URL"
}

cve-2024-45612

Vulnerability from cvelistv5

Published

2024-09-17 18:29

Modified

2024-09-18 14:09

Severity ?

5.3 (Medium) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Summary

Insert tag injection via canonical URL in Contao

References

▼	URL	Tags
	https://github.com/contao/contao/security/advisories/GHSA-2xpq-xp6c-5mgj	x_refsource_CONFIRM
	https://contao.org/en/security-advisories/insert-tag-injection-via-canonical-urls	x_refsource_MISC

Impacted products

▼	Vendor	Product
	contao	contao

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "affected": [
          {
            "cpes": [
              "cpe:2.3:a:contao:contao:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "contao",
            "vendor": "contao",
            "versions": [
              {
                "lessThan": "4.13.49",
                "status": "affected",
                "version": "4.13.0",
                "versionType": "custom"
              },
              {
                "lessThan": "5.3.15",
                "status": "affected",
                "version": "5.0.0",
                "versionType": "custom"
              },
              {
                "lessThan": "5.4.3",
                "status": "affected",
                "version": "5.4.0",
                "versionType": "custom"
              }
            ]
          }
        ],
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-45612",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-09-18T14:06:58.302616Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-09-18T14:09:48.584Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "contao",
          "vendor": "contao",
          "versions": [
            {
              "status": "affected",
              "version": "\u003e= 4.13.0, \u003c 4.13.49"
            },
            {
              "status": "affected",
              "version": "\u003e= 5.0.0, \u003c 5.3.15"
            },
            {
              "status": "affected",
              "version": "\u003e= 5.4.0, \u003c 5.4.3"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Contao is an Open Source CMS. In affected versions an untrusted user can inject insert tags into the canonical tag, which are then replaced on the web page (front end). Users are advised to update to Contao 4.13.49, 5.3.15 or 5.4.3. Users unable to upgrade should disable canonical tags in the root page settings."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-20",
              "description": "CWE-20: Improper Input Validation",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-09-17T18:29:27.210Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/contao/contao/security/advisories/GHSA-2xpq-xp6c-5mgj",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/contao/contao/security/advisories/GHSA-2xpq-xp6c-5mgj"
        },
        {
          "name": "https://contao.org/en/security-advisories/insert-tag-injection-via-canonical-urls",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://contao.org/en/security-advisories/insert-tag-injection-via-canonical-urls"
        }
      ],
      "source": {
        "advisory": "GHSA-2xpq-xp6c-5mgj",
        "discovery": "UNKNOWN"
      },
      "title": "Insert tag injection via canonical URL in Contao"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2024-45612",
    "datePublished": "2024-09-17T18:29:27.210Z",
    "dateReserved": "2024-09-02T16:00:02.425Z",
    "dateUpdated": "2024-09-18T14:09:48.584Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Action not permitted

ghsa-2xpq-xp6c-5mgj

Vulnerability from github

Impact

Patches

Workarounds

References

For more information

cve-2024-45612

Vulnerability from cvelistv5

Tags